Meraki

Ryan_Miles · ‎Oct 26 2022

What was the most recent MX license you added? Once you have any Adv Sec or SDWAN licenses it should not allow adding any further Ent licenses as the Org has been moved up past that level.

TonyPY · ‎Oct 24 2022

I have reference this doc,however it is for Organization SAML authentication.My problem is for SM enrollment to SAML with Okta.And this doc is not clear shown what should fill in "Single Sign On URL" and “Audience Url"

Madhan_kumar_G · ‎Oct 24 2022

Hi All, The licenses were purchased and faced a tough challenge. All the 270 licenses expired in one day. Then the TAC engineer clarified following. Meraki Licenses are by default activated on the day of shipping. It doesn't wait for the dashboard addition or activation. That way all my licenses expired before the day I tried adding them. So basically, this idea doesn't work. One day License means, One day only. Count of it doesn't matter. Anyway, I managed my situation. But Huge warning to others.

MeredithW · ‎Oct 20 2022

actually, this maybe controversial here, but i'm partial to GIFs so:

NetworkDemon · ‎Oct 20 2022

Congratulations !

hmc250000 · ‎Oct 19 2022

I was not able to access my profile so support had to temporarily disable 2fa so I could update my phone #. .

alemabrahao · ‎Oct 17 2022

Group Policies It is possible to manually apply group policies to clients connected via client VPN. Group Policy applied to a client VPN user is associated with the username and not the device. Different devices that connect to client VPN with the same username will receive the same group policy. For more help on assigning or removing group policies applied to a client, refer to the Creating and Applying Group Policies document. Note: It is not possible to assign group policies automatically once a user connects to client VPN.

Brash · ‎Oct 13 2022

You would implement this using firewall rules. There's different places you can apply them, but the most logical for what you're trying to achieve would be "Site-to-site outbound firewall" rules. These are configured under "Security & SD-WAN -> Site-To-Site VPN". Take a look at the below link for some extra info and examples Site-to-site VPN Firewall Rule Behavior - Cisco Meraki

alemabrahao · ‎Oct 13 2022

Make a wish.

alemabrahao · ‎Oct 11 2022

Something like that:

alemabrahao · ‎Oct 11 2022

ISE Posture over AnyConnect is possible just with FTD or Cisco ASA.

GIdenJoe · ‎Oct 10 2022

You didn't need the host , only radius communicates on that port. If your AP does not send anything when the client connects to it (so be sure it is a new session, not a roam) then the AP is not doing anything towards the radius servers. Another important note though: Dashboard captures can be a bit finnicky and it is possible your capture stopped capturing packets a long time ago. It is best if you use dashboard captures that you keep to the 30 seconds to 60 seconds mark and immediately try to connect.

CptnCrnch · ‎Oct 10 2022

Apart from that, there's a great possibility to use M365 Tenant Controls 😎

WTorres · ‎Oct 9 2022

This is a High School. We created a Guest SSID with a different VLAN just for them with limited bandwidth for their personal devices. I agree this is a very high number hence, I'm looking to put in place all the relevant advise I can find in this community. Thank you for input!

LENNIE1 · ‎Oct 7 2022

Just an update for all of you- everything has improved since the rollout of MR28.7

Brash · ‎Oct 6 2022

That's really interesting. I'd never thought about how air pressure alone would impact the ability for cooling. It hasn't come up as an issue so far (and I don't plan on installing Meraki gear on mount Kosciusko) but good to know nonetheless.

SteveScarr · ‎Oct 4 2022

No problem @jeanIoa

alemabrahao · ‎Oct 3 2022

Wow, it's the first time I've heard it, most of the time I disable it, because it's usually a problem.

rabusiak · ‎Oct 3 2022

@rabusiak wrote: Thanks for the tips 🙂 @Brash wrote: For example MX L3 firewall rules don't apply to traffic transiting a site-to-site VPN. You would need site-to-site VPN firewall rules for this traffic. So, if I create rule "deny traffic from vlan1 to "any" it will not block the traffic to networks on the other end of auto vpn tunnel? Thats kind of violation of ANY terminology 😉 Need to test that 🙂 I created standard L3 firewall rule saying block all icmp traffic between 2 hosts behind different MX devices connected with AutoVPN tunnel and traffic was blocked 🙂

alemabrahao · ‎Sep 30 2022

I think MFA on Wifi is unnecessary, If you have policies well defined and limit access on your network It's enough.

GreenMan · ‎Sep 29 2022

A couple of common reasons for this: A license has been moved to another Org The license was ordered during a 'year on us' promo - which sees (say) your 5 yr license replaced with a 6 yr one. But Support will indeed be able to tell you precisely what happened in connection to your speecific licences

Dunky · ‎Sep 29 2022

I am gonna mark this as solved even though the answer is its not available, all you can do is trawl through event logs to see if there is a record of the last state change. I have filled in the "Give your feedback" on the dashboard and submitted a request but wont hold my breath. I will report back that this simple request is not possible on Meraki switches!

QBM · ‎Sep 28 2022

I would like to nominate Evan Lane at Honibe who is helping us manage our IT infrastructure thru a hurricane that went thru Atlantic Canada. Just now slowly getting some electrical, telephone and internet services. It will be a slow process. I may have missed the contest but still wanted to acknowledge him. Hard to enter when you have no power, cell and/or data services. @AmyReyes

SteveDW · ‎Sep 28 2022

I apologize for the late response. Thank you very much for the information. It helped out greatly. Much appreciated. 🙂

BlakeRichardson · ‎Sep 27 2022

@Brash I suspect only Radius authentication is supported via proxy and accounting information isn't.

About Brash

Brash

Community Record

Badges